IDP2 to IDP3 relying-party.xml issues
sherrera
sherrera at bradley.edu
Fri Aug 31 17:12:14 EDT 2018
Let me start off with I'm a newbie to shib. I've been working on building a
new server on Ubuntu 16.04 with IDP version 3.3.3 and have been testing
against the testshib site. So far it looks like I was able to migrate most
of the old setting to the new platform. Tweaking them to fit the newer
style. My problem is the relying-party.xml. I've separated out the metadata
stuff to the metadata.providers.xml but what I can not figure out is how to
convert the following:
<rp:RelyingParty id="https://shib.oclc.org/shibboleth"
provider="https://removed/idp/shibboleth"
defaultSigningCredentialRef="IdPCredential"
nameIDFormatPrecedence="persistent">
<rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile"
includeAttributeStatement="true" assertionLifetime="PT5M"
assertionProxyCount="0" signResponses="never" signAssertions="always"
encryptAssertions="conditional" encryptNameIds="never"
includeConditionsNotBefore="true"/>
</rp:RelyingParty>
What I have come up with is:
<bean parent="RelyingPartyByName"
c:relyingPartyIds="shib.oclc.org/shibboleth">
<property name="profileConfigurations">
<list>
<bean parent="SAML2.SSO"
p:nameIDFormatPrecedence="urn:oasis:names:tc:SAML:1.1:nameid-format:persistent"
p:includeAttributeStatement="true" p:assertionLifetime="PT5M"
p:assertionProxyCount="0" p:signResponses="false" p:signAssertions="always"
p:encryptAssertions="conditional" p:encryptNameIds="never"
p:includeConditionsNotBefore="true" />
</list>
</property>
</bean>
The error I get is:
WARN
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:551]
- Exception encountered during context initialization - cancelling refresh
attempt: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'shibboleth.RelyingPartyOverrides': Cannot create
inner bean 'RelyingPartyByName$child#e76de34' of type
[net.shibboleth.idp.saml.relyingparty.impl.RelyingPartyConfigurationSupport]
while setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating bean
with name 'RelyingPartyByName$child#e76de34' defined in file
[/opt/shibboleth-idp/conf/relying-party.xml]: Cannot create inner bean
'SAML2.SSO$child#72c97b8f' of type
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]
while setting bean property 'profileConfigurations' with key [0]; nested
exception is org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'SAML2.SSO$child#72c97b8f' defined in file
[/opt/shibboleth-idp/conf/relying-party.xml]: Error setting property values;
nested exception is org.springframework.beans.NotWritablePropertyException:
Invalid property 'assertionProxyCount' of bean class
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]:
Bean property 'assertionProxyCount' is not writable or has an invalid setter
method. Does the parameter type of the setter match the return type of the
getter?
2018-08-31 16:10:18,952 - ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:181]
- Service 'shibboleth.RelyingPartyResolverService': Initial load failed
net.shibboleth.utilities.java.support.service.ServiceException:
org.springframework.beans.factory.BeanCreationException: Error creating bean
with name 'shibboleth.RelyingPartyOverrides': Cannot create inner bean
'RelyingPartyByName$child#e76de34' of type
[net.shibboleth.idp.saml.relyingparty.impl.RelyingPartyConfigurationSupport]
while setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating bean
with name 'RelyingPartyByName$child#e76de34' defined in file
[/opt/shibboleth-idp/conf/relying-party.xml]: Cannot create inner bean
'SAML2.SSO$child#72c97b8f' of type
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]
while setting bean property 'profileConfigurations' with key [0]; nested
exception is org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'SAML2.SSO$child#72c97b8f' defined in file
[/opt/shibboleth-idp/conf/relying-party.xml]: Error setting property values;
nested exception is org.springframework.beans.NotWritablePropertyException:
Invalid property 'assertionProxyCount' of bean class
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]:
Bean property 'assertionProxyCount' is not writable or has an invalid setter
method. Does the parameter type of the setter match the return type of the
getter?
at
net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:336)
Any help would be greatly appreciated. Thank you.
--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html
More information about the users
mailing list